Edit Backup Password

Use Backup Password

• Off

• On

Password

Create a backup password.

Notes:

• Off is the factory default setting for “Use Backup Password.”
• This menu item appears only if a backup password exists.

Edit Building Blocks

Internal Accounts

NTLM

Simple Kerberos Setup

Kerberos Setup

Active Directory

LDAP

LDAP+GSSAPI

Password

PIN

Edit settings for Internal Accounts, NTLM, Simple Kerberos Setup, Kerberos Setup, Active Directory, LDAP, Password, and PIN.

Edit Security Templates

[list of available templates]

Add or edit a security template.

Edit Access Controls

Administrative Menus

Function Access

Management

Solutions

Cancel jobs at the Device

Control access to printer menus, firmware updates, held jobs, and other access points.

Login Restrictions

Login failures

Failure time frame

Lockout time

Panel Login Timeout

Remote Login Timeout

Limit the number and time frames of failed login attempts from the printer control panel before all users are locked out.

Notes:

• “Login failures” specifies the number of failed login attempts before users are locked out. Settings range from 1 to 10 attempts. “3 attempts” is the factory default setting.
• “Failure time frame” specifies the time frame during which failed login attempts can be made before users are locked out. Settings range from 1 to 60 minutes. “5 minutes” is the factory default setting.
• “Lockout time” specifies how long users are locked out after exceeding the login failures limit. Settings range from 1 to 60 minutes. “5 minutes” is the factory default setting. 1 indicates that the printer does not impose a lockout time.
• Panel Login Timeout specifies how long the printer remains idle on the home screen before automatically logging off the user. Settings range from 1 to 900 seconds. “30 seconds” is the factory default setting.
• Remote Login Timeout specifies how long a remote interface remains idle before automatically logging off the user. Settings range from 1 to 120 minutes. “10 minutes” is the factory default setting.

Security Reset Jumper

No Effect

Access controls=“No Security”

Reset factory security defaults

Adjust the security settings.

Notes:

• No Effect means the reset has no effect on the printer security configuration.
• Access controls=’No Security’ retains all the security information that the user has defined. No Security is the factory default setting.
• “Reset factory security defaults” deletes all security information that the user has defined, and restores the factory default settings in the Miscellaneous Security menu.

LDAP Certificate Verification

Demand

Try

Allow

Never

Allow the user to request a server certificate.

Notes:

• “Demand” is the factory default setting. This means a server certificate is requested. If a bad certificate is provided or if no certificate is provided, then the session is terminated immediately.
• “Try” means a server certificate is requested. If no certificate is provided, then the session proceeds normally. If a bad certificate is provided, then the session is terminated immediately.
• “Allow” means a server certificate is requested. If no certificate is provided, then the session proceeds normally. If a bad certificate is provided, then it will be ignored and the session proceeds normally.
• “Never” means no server certificate is requested.

Minimum PIN Length

1–16

Limit the digit length of the personal identification number (PIN).

Note: 4 is the factory default setting.

Max Invalid PIN

Off

2–10

Set a limit on the number of times an invalid PIN can be entered.

Notes:

• This menu item appears only when a formatted, working printer hard disk is installed.
• When the limit is reached, the print jobs for that user name and PIN are deleted.

Confidential Job Expiration

Off

1 hour

4 hours

24 hours

1 week

Set a limit on how long the printer stores confidential print jobs.

Notes:

• If the “Confidential Job Expiration” setting is changed while confidential print jobs reside in the printer memory or printer hard disk, then the expiration time for those print jobs does not change to the new default value.
• If the printer is turned off, then all confidential jobs held in the printer memory are deleted.

Repeat Job Expiration

Off

1 hour

4 hours

24 hours

1 week

Set a limit on how long the printer stores print jobs.

Verify Job Expiration

Off

1 hour

4 hours

24 hours

1 week

Set a limit on how long the printer stores print jobs needing verification.

Reserve Job Expiration

Off

1 hour

4 hours

24 hours

1 week

Set a limit on how long the printer stores print jobs for printing at a later time.

Wiping Mode

Auto

Specify the mode for erasing temporary data files.

Automatic Method

Single pass

Multiple pass

Mark all disk space used by a previous print job. This method does not permit the file system to reuse this space until it has been cleared.

Notes:

• “Single pass” is the factory default setting.
• Only automatic wiping enables users to erase temporary data files without having to turn off the printer for an extended amount of time.
• Highly confidential information should be erased using only the Multiple pass method.

Export Log

Enable an authorized user to export the security log.

Notes:

• To export the log from the printer control panel, attach a flash drive to the printer.
• To export the log from the Embedded Web Server, download the log to a computer.

Delete Log

Yes

No

Specify whether audit logs are deleted.

Configure Log

Enable Audit

Yes

No

Enable Remote Syslog

No

Yes

Remote Syslog Server

[256 character string]

Remote Syslog Port

1–65535

Remote Syslog Method

Normal UDP

Stunnel

Remote Syslog Facility

0–23

Log full behavior

Wrap over oldest entries

E-mail log then delete all entries

Specify how audit logs are configured.

Notes:

• Enable Audit determines if events are recorded in the secure audit log and remote syslog. No is the factory default setting.
• Enable Remote Syslog determines if logs are sent to a remote server. No is the factory default setting.
• Remote Syslog Server determines the value used to send logs to the remote syslog server.
• Remote Syslog Port identifies the port over which the printer transmits logged events to a remote server.
• Remote Syslog Method identifies the protocol used by the printer to transmit logged events to a remote server. Normal UDP is the factory default setting.
• Remote Syslog Facility determines the Facility value that the printer uses when sending events to the remote syslog server. 4 is the factory default setting.
• “Log full behavior” determines how the printer resolves if the log entirely fills its allotted memory. “Wrap over oldest entries” is the factory default setting.

Configure Log (continued)

Admin’s e-mail address

[256 character string]

Digitally sign exports

Off

On

Severity of events to log

0–7

Remote Syslog non-logged events

No

Yes

E-mail log cleared alert

No

Yes

E-mail log wrapped alert

No

Yes

E-mail % full alert

No

Yes

% full alert level

1–99

E-mail log exported alert

No

Yes

E-mail log settings changed alert

No

Yes

Log line endings

LF (\n)

CR (\r)

CRLF (\r\n)

Specify how audit logs are configured.

Notes:

• “Admin’s e-mail address” determines if administrators are automatically notified of certain log events. This setting can have one or more e-mail addresses (separated by commas).
• “Digitally sign exports” determines if the printer automatically signs each exported security log. Off is the factory default setting.
• “Severity of events to log” records the severity value of each event. 4 is the factory default setting.
• “Remote Syslog non-logged events” determines if the printer sends events to the remote server that have a severity level greater than the value of the “Severity of events to log” setting. No is the factory default setting.
• “E-mail log cleared alert” determines if the printer sends an e-mail to the administrator every time a log is deleted through the printer control panel or EWS. No is the factory default setting.
• “E-mail log wrapped alert” determines if the printer sends the administrator an e-mail when log entries are wrapping. No is the factory default setting.
• “E-mail % full alert” determines if the printer sends the administrator an e-mail when the log fills a certain amount of its allotted space. No is the factory default setting.
• “% full alert level” determines if the space occupied by log equals or exceeds the value of the full alert level. 90 is the factory default setting.
• “E-mail log exported alert” determines if the printer sends the administrator an e-mail when there is a log exported. No is the factory default setting.
• “E-mail log settings changed alert” determines if the printer sends the administrator an e-mail when the value of the Enable Audit Log setting is toggled. No is the factory default setting.
• “Log line endings” specifies how line endings will be handled in the log file, depending on the operating system in which the file will be parsed or viewed. “LF (\n)” is the factory default setting.

Current Date and Time

Set the current printer date and time.

Manually Set Date and Time

Enter the printer date and time.

Note: Date/Time is set in YYYY-MM-DD HH:MM:SS format.

Time Zone

Select the printer time zone.

Note: GMT is the factory default setting.

Automatically Observe DST

On

Off

Set the printer to use the applicable daylight saving time (DST) start and end times associated with the printer Time Zone setting.

Note: On is the factory default setting and uses the applicable Daylight Saving Time associated with the Time Zone setting.

Custom Time Zone Setup

UTC Offset

DST Start Week

DST Start Day

DST Start Month

DST Start Time

DST End Week

DST End Day

DST End Month

DST End Time

DST Offset

Set up the time zone.

Enable NTP

On

Off

Synchronize the clocks of devices over a network.

Note: On is the factory default setting.

NTP Server

View the NTP server address.

Enable Authentication

On

Off

Set the credentials when accessing the NTP server.

Note: Off is the factory default setting.